PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2018 document archive · 12

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,627 documents · Identifier year 2018 · 12 / 33

  1. CVE-2018-15471kernel: net: xen: Linux netback driver OOB access in hash handling (XSA-270)
  2. CVE-2018-15209libtiff: Heap-based buffer overflow in ChopUpSingleUncompressedStrip in tif_dirread.c
  3. CVE-2018-15173nmap: Stack exhausation when -sV option is used allows for DoS
  4. CVE-2018-15127libvncserver: Heap out-of-bounds write in rfbserver.c in rfbProcessFileTransferReadBuffer() allows for potential code execution
  5. CVE-2018-15126libvncserver: Use-after-free in file transfer extension allows for potential code execution
  6. CVE-2018-15120pango: application crash triggered by unicode chars in pango-emoji.c
  7. CVE-2018-14939libreoffice: Use of realpath() in desktop/unx/source/start.c:get_app_path() allows for potential buffer overflow
  8. CVE-2018-14884php: Mishandled http_header_value in an atoi() call in http_fopen_wrapper.c
  9. CVE-2018-14883php: exif: integer overflow leading to out-of-bound buffer read in exif_thumbnail_extract()
  10. CVE-2018-14882tcpdump: Buffer over-read in function rpl_dio_printopt in print-icmp6.c
  11. CVE-2018-14881tcpdump: Buffer over-read in bgp_capabilities_print() function in print-bgp.c
  12. CVE-2018-14880tcpdump: Buffer over-read in ospf6_print_lshdr() function in print-ospf6.c
  13. CVE-2018-14879tcpdump: Out of bounds read/write in in get_next_file() in tcpdump.c
  14. CVE-2018-14851php: exif: Buffer over-read in exif_process_IFD_in_MAKERNOTE()
  15. CVE-2018-14734kernel: use-after-free in ucma_leave_multicast in drivers/infiniband/core/ucma.c
  16. CVE-2018-14721jackson-databind: server-side request forgery (SSRF) in axis2-jaxws class
  17. CVE-2018-14720jackson-databind: exfiltration/XXE in some JDK classes
  18. CVE-2018-14719jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes
  19. CVE-2018-14718jackson-databind: arbitrary code execution in slf4j-ext class
  20. CVE-2018-14682libmspack: off-by-one error in the TOLOWER() macro for CHM decompression
  21. CVE-2018-14681libmspack: out-of-bounds write in kwajd_read_headers in mspack/kwajd.c
  22. CVE-2018-14680libmspack: off-by-one error in the CHM chunk number validity checks
  23. CVE-2018-14679libmspack: off-by-one error in the CHM PMGI/PMGL chunk number validity checks
  24. CVE-2018-14678xen: Uninitialized state in x86 PV failsafe callback path (XSA-274)
  25. CVE-2018-14665xorg-x11-server: Incorrect permission check in Xorg X server allows for privilege escalation
  26. CVE-2018-14662ceph: authenticated user with read only permissions can steal dm-crypt / LUKS key
  27. CVE-2018-14661glusterfs: features/locks translator passes an user-controlled string to snprintf without a proper format string resulting in a denial of service
  28. CVE-2018-14660glusterfs: Repeat use of "GF_META_LOCK_KEY" xattr allows for memory exhaustion
  29. CVE-2018-14659glusterfs: Unlimited file creation via "GF_XATTR_IOSTATS_DUMP_KEY" xattr allows for denial of service
  30. CVE-2018-14656kernel: Arbitrary Kernel Read into dmesg via Missing Address Check in segfault Handler
  31. CVE-2018-14654glusterfs: "features/index" translator can create arbitrary, empty files
  32. CVE-2018-14653glusterfs: Heap-based buffer overflow via "gf_getspec_req" RPC message
  33. CVE-2018-14652glusterfs: Buffer overflow in "features/locks" translator allows for denial of service
  34. CVE-2018-14651glusterfs: glusterfs server exploitable via symlinks to relative paths
  35. CVE-2018-14650sos-collector: incorrect permissions set on newly created files
  36. CVE-2018-14648389-ds-base: Mishandled search requests in servers/slapd/search.c:do_search() allows for denial of service
  37. CVE-2018-14647python: Missing salt initialization in _elementtree.c module
  38. CVE-2018-14646kernel: NULL pointer dereference in af_netlink.c:__netlink_ns_capable() allows for denial of service
  39. CVE-2018-14645haproxy: Out-of-bounds read in HPACK decoder
  40. CVE-2018-14642undertow: Infoleak in some circumstances where Undertow can serve data from a random buffer
  41. CVE-2018-14641kernel: a bug in ip_frag_reasm() can cause a crash in ip_do_fragment()
  42. CVE-2018-14638389-ds-base: Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly
  43. CVE-2018-14634kernel: Integer overflow in Linux's create_elf_tables function
  44. CVE-2018-14633kernel: stack-based buffer overflow in chap_server_compute_md5() in iscsi target
  45. CVE-2018-14629samba: Unprivileged adding of CNAME record causing loop in AD LDAP server
  46. CVE-2018-14628samba: Unprivileged read of deleted object tombstones in AD LDAP server
  47. CVE-2018-14625kernel: use-after-free Read in vhost_transport_send_pkt
  48. CVE-2018-14624389-ds-base: Server crash through modify command with large DN
  49. CVE-2018-14622libtirpc: Segmentation fault in makefd_xprt return value in svc_vc.c
  50. CVE-2018-14621libtirpc: Infinite loop in EMFILE case in svc_vc.c
CVE 2018 document archive — Page 12 | PulseLinux